Imperva to acquire CloudVector: Prioritizing API Protection for Modern Environments

I am excited to announce Imperva has entered into an agreement to acquire CloudVector to advance our mission to protect data and all paths to it. Together, we believe we can change what organizations expect from Web Application and API Protection solutions. There are multiple reasons APIs are at...

CVE-2021-30169

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

Windows Console Driver DoS

The vulnerability of the Windows Console Driver component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Visual Studio Code Editor Code Execution

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

IBM Spectrum Protect Plus Information Disclosure Vulnerability (CNVD-2021-31469)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. IBM Spectrum Protect Plus has a security...

IBM Spectrum Protect Buffer Overflow Vulnerability (CNVD-2021-31236)

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

DNS service in Microsoft Windows Unauthorized Access

The vulnerability of the DNS service in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2021-2263

CVE-2021-2263 affects Oracle E-Business Suite Oracle Sourcing Intelligence/RFx (12.1.1–12.1.3). A low-privilege, network-accessible attacker over HTTP can cause unauthorized creation/modification/deletion of data or access to Oracle Sourcing data. Public descriptions consistently state CVSS v3.1 ...

It’s Easy to Become a Cyberattack Target, but a VPN Can Help

Even though data breaches top news headlines every other week, it’s still tempting to think that no one is interested in your data. But a hacker doesn’t need to target you in particular to get their hands on your most sensitive information. Let’s look at the cyber-threats out there and how a...

Windows Codecs Library Unauthorized Access

The vulnerability of the Windows Codecs Library, used for processing media content on Microsoft Windows operating systems, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Application Compatibility Cache DoS

The vulnerability of the Application Compatibility Cache component “AppCompatCache” in Microsoft Windows systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CDATA Management Data Cleaning

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

Linux rtr_recvmsg Information Disclosure

The vulnerability of the rtrrecvmsg function in the Linux operating system’s net/qrtr/qrtr.c file is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to obtain confidential information...

SMB Protocol Unauthorized Access

The vulnerability of the SMB protocol implementation in Microsoft Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

CDATA Optical Line Terminals Insufficient Protection

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

Windows Kernel Unauthorized Access

The vulnerability of the kernel of Microsoft Windows is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CDATA Optical Line Terminals Insufficient Protection

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

Procedure Call Runtime Windows Code Execution

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Windows TCP/IP Unauthorized Access

The vulnerability of the TCP/IP protocol stack implementation in Microsoft Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...